General
- Target notepadpp.msi
- Size 30KB
- Sample260620-klts6sdz9p
- SHA256 7986b34f3f62078fdf8bc5ed8a7495e942d0e6b9f6e1e44dd33a066eb0865a81
- MD5 89bbc2dc87edbf317d954f329ad1a0a5
- SHA1 2a43381d99c788457886210a93544c18bae9046b
- SHA512 2f81dadc95b04db076ad7e7ad052941aaf58b520731657b6859458f5da1cd55390500ed06222e22468b77f97be2ae2d51e01b758dbb2dbbd44842554b54ee87a
- SSDEEP 768:0kTUc0GEym3W7Z6qrGK48eWMbCCeMN/nq:QcsNTp8ob4
- TLSH T1E0D26D46BA419332C5431B324A4FD7E84F76AC588F5321013797B38D2E376E56ABB9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
notepadpp.msi
Resource
win11-20260513-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target notepadpp.msi
- Size 30KB
- SHA256 7986b34f3f62078fdf8bc5ed8a7495e942d0e6b9f6e1e44dd33a066eb0865a81
- MD5 89bbc2dc87edbf317d954f329ad1a0a5
- SHA1 2a43381d99c788457886210a93544c18bae9046b
- SHA512 2f81dadc95b04db076ad7e7ad052941aaf58b520731657b6859458f5da1cd55390500ed06222e22468b77f97be2ae2d51e01b758dbb2dbbd44842554b54ee87a
- SSDEEP 768:0kTUc0GEym3W7Z6qrGK48eWMbCCeMN/nq:QcsNTp8ob4
- TLSH T1E0D26D46BA419332C5431B324A4FD7E84F76AC588F5321013797B38D2E376E56ABB9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1